Computer Science Homework Help

Should the scope of a software system ever be modified to accommodate security changes? Justify your position.

How can limiting scope creep enhance the security of a software system?

Why is it important to establish metrics for security in defining requirements? What would happen if there were no metrics established?

Why should a system always be con-structed to fail safely? What are the minimum expectations for a general system to have failed safely?

Why are security considerations important in the planning of system behavior? Give examples to justify your position.

Why is consideration of error messages and outgoing information an important concern in vulnerability mapping?